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DETAILED ACTION 

Continued Examination Under 37 CFR 1.114 

1 . A request for continued examination under 37 CFR 1.114, including the fee set forth in 
37 CFR 1.17(e), was filed in this application after final rejection. Since this application is eligible 
for continued examination under 37 CFR 1.114, and the fee set forth in 37 CFR 1.17(e) has 
been timely paid, the finality of the previous Office action has been withdrawn pursuant to 37 
CFR 1.114. Applicant's submission filed on 04/22/2008 has been entered. Claims 1, 4-5, 7- 

8,1 1-13,15 and 17 are pending. 

Response to Arguments 

2. Applicant's arguments with respect to claim 04/22/2008 have been considered but are 
moot in view of the new ground(s) of rejection. 

Claim Rejections - 35 USC §103 

3. Claims 1,4-5,7-8 and 11-12 are rejected under 35 U.S.C. 103(a) 35 U.S.C. 103(a) as 
being unpatentable over the combination of Holvey et al., U.S. Patent Publication No. 
2004/0054935, (hereinafter "Holvey") and Prihoda et al., U.S. Patent No. 6,789,195, 
(hereinafter "Prihoda") and further in view of Chadwick, "Smart Cards Aren't Always the 
Smart Choice," IEEE Computer, December 1999, v. 32, issue 12, pp. 142-143, (hereinafter 
"Chadwick"). 

4. Regarding claims 1,11 and 12: Holvey discloses a data processing system (Title), 
method (Title), and an executable computer program on a tangible medium ([0038] software), 
respectively, for controlling access of at least one user to stored data comprising: 

means, responsive to a request from the user to access a set of the stored data that is available 
to the at least one user, for authenticating the user ([0022] requesting user authenticated via 
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voice-print or ID and password), wherein the request is initiated by presentation of a token by 
the user ([0022] token); and 

a user specific table associated with the user (patient medical records and associated 
authorized users), wherein the user specific table identifies the set ([0023]-[0024] Table 1 ), 
the user specific table comprises (ii) second data associated with the location of the set ([0032] 
hyperlinks); 

additional user specific tables for each additional user ([0007] patient database, i.e., 
collection of patient tables); 

by more than one user ([0023] owners/patients and other authorized users), and means 
for accessing data associated with each user of the more than one users ([0023] patients have 
complete access, other authorized users' access is controlled by patients); 

Holvey does not disclose decrypting the user specific table or accessing the set in 
response to successful decryption. 

Holvey does not disclose the token comprising the means for decrypting. 

Holvey does not disclose that the set is encrypted or that the user specific table 
comprises data associated with decryption of the set. 

Prihoda discloses means, responsive to successful authentication, for decrypting a user 
specific table associated with the user (col. 1, II. 57-65, storage... data... decrypted...); and 
means, responsive to successful decryption, for accessing the set (col. 2, II. 15-20, col. 3, II. 35- 
46: authorized data access with key...). 

As one of ordinary skill in the art at the time of the invention would know, encrypting 
documents has been well-known since long before the invention. Therefore, it would have been 
obvious to one of ordinary skill in the art at the time of the invention to modify Holvey by 
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encrypting and decrypting data as taught by Prihoda in order to maintain confidentiality of users' 
information, (see Prihoda, col. 2 II. 15-16). 

Prihoda discloses a token comprising the means for decrypting (Abstract and col. 2, II. 
15-20, key for decrypting). 

As one of ordinary skill in the art at the time of the invention would know, software 
tokens have been well-known since long before the invention, (see Chadwick, p. 142, col. 1-2, 
regarding public/private key infrastructure software tokens). Therefore, it would have been 
obvious to one of ordinary skill in the art at the time of the invention to modify Holvey by 
encrypting and decrypting data as taught by Prihoda in order to maintain confidentiality of users' 
information, (see Prihoda, col. 3 II. 20-21). 

Prihoda discloses that the set is encrypted and the user specific table comprises data 
associated with decryption of the set (col. 2, II. 15-20, col. 3, II. 35-46, special key for 
decrypting). 

Encrypting documents has been well-known since long before the invention, therefore, it 
would have been obvious to one of ordinary skill in the art at the time of the invention to modify 
Holvey by encrypting and decrypting data as taught by Prihoda in order to maintain 
confidentiality of users' information, (see Prihoda, col. 2 II. 15-16). 

5. Regarding claim 4: Holvey discloses a set comprising all of the stored data ([0023] 
complete set of rights). 

6. Regarding claim 5: Holvey discloses a set comprising portion of the stored data ([0023] 
limited rights). 

7. Regarding claim 7: Holvey discloses a token comprising means associated with an 
identity of the user ([0022] user specific token). 
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8. Regarding claim 8: Holvey discloses a means associated with the identity of the user 
derived from one or more biometric characteristics associated with the user ([0022] and [0031] 
voice-print). 

9. Claims 13,15, and 17 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over the combination of Holvey and Prihoda as applied to claim 1 above, and further in 
view of Mita et al., U.S. Patent Publication No. 2002/0035485 A1, (hereinafter "Mita"). 

10. Regarding claims 13,15 and 17: Holvey discloses additional user specific tables for 
each additional user ([0007] patient database, i.e., collection of patient tables). 

Mita discloses means for attempting to decrypt, in turn, each of the user specific tables 
until a successful decryption occurs ([0042] sequential search). 

As one of ordinary skill in the art at the time of the invention would know, sequential 
searching has been well-known since long before the invention. Therefore, it would have been 
obvious to one of ordinary skill in the art at the time of the invention to modify Holvey by 
sequential searching as taught by Mita in order to access stored personal including medical 
data (see Mita, Title). 

Conclusion 

11. Any inquiry concerning this communication or earlier communications from the examiner 
should be directed to LAUREL LASHLEY whose telephone number is (571)272-0693. The 
examiner can normally be reached on Monday - Thursday, alt Fridays btw 7:30 am & 5 pm. If 
attempts to reach the examiner by telephone are unsuccessful, the examiner's supervisor, 
Gilberto Barron, Jr. can be reached on 571-272-3799. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
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may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private 
PAIR system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you 
would like assistance from a USPTO Customer Service Representative or access to the 
automated information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 



Laurel Lashley 
Examiner 
Art Unit 2132 

/L U 

18 July 2008 



/Gilberto Barron Jr/ 

Supervisory Patent Examiner, Art Unit 2132 



